replace Code-to-Learn certs with Scratch Foundation certs

This commit is contained in:
Christopher Willis-Ford 2020-07-31 15:10:10 -07:00
parent 686ba5bf0c
commit b5b432786a

View file

@ -58,17 +58,17 @@ jobs:
} }
decodeToFile embedded.provisionprofile "${MAC_PROVISION_PROFILE}" decodeToFile embedded.provisionprofile "${MAC_PROVISION_PROFILE}"
decodeToFile mas-dev.provisionprofile "${MAC_DEV_PROVISION_PROFILE}" decodeToFile mas-dev.provisionprofile "${MAC_DEV_PROVISION_PROFILE}"
decodeToFile code-to-learn-macos.p12 "${CSC_MACOS}" decodeToFile macos-certs-scratch-foundation.p12 "${CSC_MACOS}"
security -v create-keychain -p circleci circleci.keychain security -v create-keychain -p circleci circleci.keychain
security -v default-keychain -s circleci.keychain security -v default-keychain -s circleci.keychain
security -v import code-to-learn-macos.p12 -k circleci.keychain -P "" -T /usr/bin/codesign -T /usr/bin/productbuild security -v import macos-certs-scratch-foundation.p12 -k circleci.keychain -P "${CSC_MACOS_PASSWORD}" -T /usr/bin/codesign -T /usr/bin/productbuild
security -v unlock-keychain -p circleci circleci.keychain security -v unlock-keychain -p circleci circleci.keychain
# "set-key-partition-list" prints extensive not-so-useful output and adding "-q" (even multiple times) doesn't suppress it. # "set-key-partition-list" prints extensive not-so-useful output and adding "-q" (even multiple times) doesn't suppress it.
# The "grep -v" at the end of this line suppresses all of that so any errors or warnings might be more visible. # The "grep -v" at the end of this line suppresses all of that so any errors or warnings might be more visible.
security -v set-key-partition-list -S apple-tool:,apple:,codesign: -s -k circleci circleci.keychain | grep -v '^ 0x' security -v set-key-partition-list -S apple-tool:,apple:,codesign: -s -k circleci circleci.keychain | grep -v '^ 0x'
security -v set-keychain-settings -lut 600 circleci.keychain security -v set-keychain-settings -lut 600 circleci.keychain
security -v find-identity circleci.keychain security -v find-identity circleci.keychain
rm code-to-learn-macos.p12 rm macos-certs-scratch-foundation.p12
- restore_cache: - restore_cache:
name: Restore Homebrew cache name: Restore Homebrew cache
key: homebrew-cache-v1 key: homebrew-cache-v1